NetKeep vs Oxidized
NetKeep
github.comOxidized
github.comSide by side
| Figure | NetKeep | Oxidized |
|---|---|---|
| Price from | Free | Free |
| Free plan | Yes | Yes |
| Free trial | — | — |
| Open source | — | — |
| Web | Yes | Yes |
| Linux | Yes | Yes |
| API | — | Yes |
| Self-hosted | Yes | Yes |
| Plans published | 1 | 1 |
| Spec score · Network Configuration Management Software | 7.4 (#19) | 8.0 (#7) |
| Integrations | NetKeep supports read-only inventory synchronization with LibreNMS and NetBox. | Hooks support GitHub repository pushes, AWS SNS, Slack, Cisco Spark and XMPP notifications. |
| License | NetKeep's original code is distributed under the GNU Affero General Public License v3.0. | The repository identifies Oxidized as licensed under Apache License 2.0. |
| Purpose | NetKeep collects, versions, compares, and protects network device configurations for ISPs and infrastructure teams. | Oxidized is a network device configuration backup tool and a RANCID replacement. |
| Support | Community support is best-effort with no SLA; commercial implementation, migration, or operational support is arranged by email. | The project points users to Gitter, GitHub, and the LibreNMS community forum for help and support. |
Plans
In their own words
NetKeep
NetKeep is a free, open-source, self-hosted system for collecting, versioning, comparing, and protecting network-device configurations. It uses Oxidized 0.37.0 to gather configurations and keeps each version in permanent Git history. Teams can search, download, and compare revisions with unified or side-by-side diffs. Read-only inventory synchronization is available with LibreNMS and NetBox. Notifications can be sent by email, signed webhook, or Telegram. Full backups may be encrypted and stored locally or in S3-compatible services, with private Git mirroring as another option. Roles include owner, administrator, operator, and reader; optional TOTP two-factor authentication and passkeys are supported. Safe mode exports and compares configurations without applying changes, although arbitrary Ruby or unreviewed drivers reduce that assurance. Installation needs a Linux amd64 or arm64 server, Docker Engine 25+, Docker Compose plugin 2.24+, and persistent storage. The product is on-premises under AGPL-3.0.
Oxidized
Oxidized is a network device configuration backup tool and a RANCID replacement. It supports more than 130 operating system types, with SSH and Telnet among its documented input methods. Node records can come from CSV, SQLite, MySQL, or HTTP. Backups can be written to files, Git, Git-Crypt, or HTTP; Git records a commit for each configuration change, while Git-Crypt encrypts configuration pushes using git-crypt. Oxidized adjusts its thread count to meet the configured retrieval interval. Its REST API can list nodes, retrieve configurations, show versions and diffs, reload nodes, and move a node to the front of the queue. Syslog examples can prompt a fetch after configuration changes. The web interface and API are supplied by the optional oxidized-web gem, disabled by default and configured for port 8888 by default. A setting can strip sensitive data before storage. Oxidized is free under Apache License 2.0 and is deployed on-premises; documented installation options include Linux distributions, FreeBSD, Docker, and Podman. The project says it has few maintainers and invites more involvement.